Abstract: An automation system for monitoring a safety-critical process includes a platform, a fail-safe peripheral module, and a safe runtime environment. The platform executes user programs. The user programs include a first user program and a second user program, which together implement a safety function. The second user program is diversitary with respect to the first user program. The fail-safe peripheral module couples the user programs with the safety-critical process. The safe runtime environment is implemented on the platform independently of the user programs and provides the user programs with safe resources independent of the platform.

Abstract: A cycloidal transmission for a drive includes a housing, a drive shaft, an eccentric, a cam plate, a pin plate, an output shaft, and a torque detection mechanism. The housing includes a first bearing, a second bearing, and a rolling ring. The drive shaft is rotatably mounted in the first bearing. The eccentric is fixedly connected to the drive shaft. The cam plate is driven by the eccentric. The cam plate is configured to roll in the rolling ring. Pins of the pin plate are configured to engage holes of the cam plate, so that the pin plate is driven by the cam plate. The output shaft is fixedly connected to the pin plate. The output shaft is rotatably mounted in the second bearing. The torque detection mechanism is between the first bearing and the second bearing and configured to detect the torque of the output shaft.

Abstract: An automation system for monitoring a safety-critical process includes a platform, a fail-safe peripheral module, and a safe runtime environment. The platform executes user programs. The user programs include a first user program and a second user program, which together implement a safety function. The second user program is diversitary with respect to the first user program. The fail-safe peripheral module couples the user programs with the safety-critical process. The safe runtime environment is implemented on the platform independently of the user programs and provides the user programs with safe resources independent of the platform.

Abstract: An automation system for monitoring a safety-critical process includes a platform configured to execute user programs that implement a safety function, a fail-safe peripheral module configured to couple the user programs with the safety-critical process, and a monitoring device configured to ensure fail-safe execution of the safety function on the platform. The monitoring device is couplable to the platform via a first communication interface and the fail-safe peripheral module is couplable to the platform via a second communication interface. The monitoring device runs a fail-safe service independently of the platform, via which the monitoring device interacts with the fail-safe peripheral module. The fail-safe peripheral module signals a safe state based on the implemented safety function and the fail-safe service.

Abstract: Apparatus for voltage monitoring of a dual-channel device which implements or monitors a safety function of a machine or technical installation. The apparatus comprises an input for receiving an input voltage, a voltage regulator for generating a defined output voltage, and an output for providing the defined output voltage for the operation of the device. A voltage monitor compares a voltage present at the output with the defined output voltage and switches off the output in case the present voltage at the output deviates from the defined output voltage. A first interface and a second interface connect the voltage regulator to the dual-channels of the device, wherein the first interface and the second interface connect to a first processing channel and a second processing channel of the device separately so that the first processing channel and the second processing channel of the device can detune the voltage regulator independently.

Abstract: Apparatus for voltage monitoring of a dual-channel device which implements or monitors a safety function of a machine or technical installation. The apparatus comprises an input for receiving an input voltage, a voltage regulator for generating a defined output voltage, and an output for providing the defined output voltage for the operation of the device. A voltage monitor compares a voltage present at the output with the defined output voltage and switches off the output in case the present voltage at the output deviates from the defined output voltage. A first interface and a second interface connect the voltage regulator to the dual-channels of the device, wherein the first interface and the second interface connect to a first processing channel and a second processing channel of the device separately so that the first processing channel and the second processing channel of the device can detune the voltage regulator independently.

Abstract: A cycloidal transmission for a drive includes a housing, a drive shaft, an eccentric, a cam plate, a pin plate, an output shaft, and a torque detection mechanism. The housing includes a first bearing, a second bearing, and a rolling ring. The drive shaft is rotatably mounted in the first bearing. The eccentric is fixedly connected to the drive shaft. The cam plate is driven by the eccentric. The cam plate is configured to roll in the rolling ring. Pins of the pin plate are configured to engage holes of the cam plate, so that the pin plate is driven by the cam plate. The output shaft is fixedly connected to the pin plate. The output shaft is rotatably mounted in the second bearing. The torque detection mechanism is between the first bearing and the second bearing and configured to detect the torque of the output shaft.

Abstract: Apparatus for voltage monitoring of a dual-channel device which implements or monitors a safety function of a machine or technical installation. The apparatus comprises an input for receiving an input voltage, a voltage regulator for generating a defined output voltage, and an output for providing the defined output voltage for the operation of the device. A voltage monitor compares a voltage present at the output with the defined output voltage and switches off the output in case the present voltage at the output deviates from the defined output voltage. A first interface and a second interface connect the voltage regulator to the dual-channels of the device, wherein the first interface and the second interface connect to a first processing channel and a second processing channel of the device separately so that the first processing channel and the second processing channel of the device can detune the voltage regulator independently.